It's possible to access disk content with broser path ABOUT:hello<a href=\>click here</a>.
vulners.com/securityvulns/securityvulns:doc:15393